Description (CNA)
mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mySCADA / myDESIGNER | affected All through 8.20.0 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.